tpm_activate Command
Purpose
Changes the Trusted Platform Module (TPM) active states.
Syntax
tpm_activate [ -a ] [ -h ] [ -i ] [ -l [ none | error | info | debug ] ] [ -s ] [ -t ] [ -v ]
Description
The tpm_activate command reports the status of the TPM flags regarding the active state of the TPM. This is the default behavior, and it is also accessible through the -s (or --status) option. It prompts for the owner password when it reports the TPM status.
The -a (or --active) option changes the TPM to the active state (through the TPM_PhysicalSetDeactivated API). This operation is persistent. It requires physical presence for authorization, and a system reboot operation to take effect.
The -i (or --inactive) option (through the TPM_PhysicalSetDeactivated API) changes the TPM to the inactive state. This operation is persistent. It requires physical presence for authorization, and a system reboot operation to take effect. Although an inactive TPM can be considered to be off, it still allows the tpm_takeownership command to run.
The -t (or --temp) option causes immediate TPM deactivation (through the TPM_SetTempDeactivated API) to occur but persists only for the current boot cycle.
The -s (or --status), -a (or --active), -i (or --inactive), and -t (or --temp) options are mutually exclusive and the last option on the command line is carried out.
Flags
| Item | Description |
|---|---|
| -a (or --active) | Makes the TPM active. This operation is persistent. The operation requires physical presence for authorization, and a system reboot operation to take effect. |
| -h (or --help) | Displays the command usage information. |
| -i (or --inactive) | Makes the TPM inactive. This operation is persistent. The operation requires physical presence for authorization, and a system reboot operation to take effect. |
| -l (or --log) [ none | error | info | debug ] | Sets the logging level to none, error, info, or debug as specified. |
| -s (or --status) | Reports the status of flags regarding the TPM active states. |
| -t (or --temp) | Makes the TPM inactive for the current boot cycle only. |
| -v (or --version) | Displays the command version information. |